CVE-2016-4340
- Source
- https://cve.org/CVERecord?id=CVE-2016-4340
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-4340.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2016-4340
- Downstream
- Published
- 2017-01-23T21:59:01.487Z
- Modified
- 2026-08-27T18:52:42.022134Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
The impersonate feature in Gitlab 8.7.0, 8.6.0 through 8.6.7, 8.5.0 through 8.5.11, 8.4.0 through 8.4.9, 8.3.0 through 8.3.8, and 8.2.0 through 8.2.4 allows remote authenticated users to "log in" as any other user via unspecified vectors.
- References
Affected packages
Git / gitlab.com/gitlab-org/gitlab
Affected ranges
- Type
- GIT
- Repo
- https://gitlab.com/gitlab-org/gitlab
- Events
-
IntroducedLast affected
- Database specific
-
Show details
{ "cpe": [ "cpe:2.3:a:gitlab:gitlab:8.2.0:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.2.1:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.2.2:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.2.3:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.2.4:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.3.0:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.3.1:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.3.2:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.3.3:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.3.4:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.3.5:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.3.6:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.3.7:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.3.8:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.4.2:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.4.3:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.4.4:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.4.5:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.4.6:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.4.7:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.4.8:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.4.9:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.5.1:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.5.2:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.5.3:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.5.4:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.5.5:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.5.6:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.5.7:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.5.8:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.5.9:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.5.10:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.5.11:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.6.1:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.6.2:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.6.3:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.6.4:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.6.5:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.6.6:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.6.7:*:*:*:*:*:*:*", "cpe:2.3:a:gitlab:gitlab:8.7.0:*:*:*:*:*:*:*" ], "source": "CPE_STRING", "extracted_events": [ { "introduced": "8.2.0" }, { "last_affected": "8.2.0" }, { "introduced": "8.2.1" }, { "last_affected": "8.2.1" }, { "introduced": "8.2.2" }, { "last_affected": "8.2.2" }, { "introduced": "8.2.3" }, { "last_affected": "8.2.3" }, { "introduced": "8.2.4" }, { "last_affected": "8.2.4" }, { "introduced": "8.3.0" }, { "last_affected": "8.3.0" }, { "introduced": "8.3.1" }, { "last_affected": "8.3.1" }, { "introduced": "8.3.2" }, { "last_affected": "8.3.2" }, { "introduced": "8.3.3" }, { "last_affected": "8.3.3" }, { "introduced": "8.3.4" }, { "last_affected": "8.3.4" }, { "introduced": "8.3.5" }, { "last_affected": "8.3.5" }, { "introduced": "8.3.6" }, { "last_affected": "8.3.6" }, { "introduced": "8.3.7" }, { "last_affected": "8.3.7" }, { "introduced": "8.3.8" }, { "last_affected": "8.3.8" }, { "introduced": "8.4.0" }, { "last_affected": "8.4.0" }, { "introduced": "8.4.1" }, { "last_affected": "8.4.1" }, { "introduced": "8.4.2" }, { "last_affected": "8.4.2" }, { "introduced": "8.4.3" }, { "last_affected": "8.4.3" }, { "introduced": "8.4.4" }, { "last_affected": "8.4.4" }, { "introduced": "8.4.5" }, { "last_affected": "8.4.5" }, { "introduced": "8.4.6" }, { "last_affected": "8.4.6" }, { "introduced": "8.4.7" }, { "last_affected": "8.4.7" }, { "introduced": "8.4.8" }, { "last_affected": "8.4.8" }, { "introduced": "8.4.9" }, { "last_affected": "8.4.9" }, { "introduced": "8.5.0" }, { "last_affected": "8.5.0" }, { "introduced": "8.5.1" }, { "last_affected": "8.5.1" }, { "introduced": "8.5.2" }, { "last_affected": "8.5.2" }, { "introduced": "8.5.3" }, { "last_affected": "8.5.3" }, { "introduced": "8.5.4" }, { "last_affected": "8.5.4" }, { "introduced": "8.5.5" }, { "last_affected": "8.5.5" }, { "introduced": "8.5.6" }, { "last_affected": "8.5.6" }, { "introduced": "8.5.7" }, { "last_affected": "8.5.7" }, { "introduced": "8.5.8" }, { "last_affected": "8.5.8" }, { "introduced": "8.5.9" }, { "last_affected": "8.5.9" }, { "introduced": "8.5.10" }, { "last_affected": "8.5.10" }, { "introduced": "8.5.11" }, { "last_affected": "8.5.11" }, { "introduced": "8.6.0" }, { "last_affected": "8.6.0" }, { "introduced": "8.6.1" }, { "last_affected": "8.6.1" }, { "introduced": "8.6.2" }, { "last_affected": "8.6.2" }, { "introduced": "8.6.3" }, { "last_affected": "8.6.3" }, { "introduced": "8.6.4" }, { "last_affected": "8.6.4" }, { "introduced": "8.6.5" }, { "last_affected": "8.6.5" }, { "introduced": "8.6.6" }, { "last_affected": "8.6.6" }, { "introduced": "8.6.7" }, { "last_affected": "8.6.7" }, { "introduced": "8.7.0" }, { "last_affected": "8.7.0" } ] }